$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/470d3291-33be-34b8-9ed3-d7a03cf6996c.roa File: 470d3291-33be-34b8-9ed3-d7a03cf6996c.roa (raw, json) Hash identifier: QrUpcy3Ja9d9AyU3QskdJ2S9T0T0sxxxLqd/IMuA2T8= Subject key identifier: E8:DA:56:BC:5F:7E:DC:AF:6C:43:3C:98:57:65:51:7B:81:95:B3:8C Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F4328584ADECBD59E86300E94D774FD00 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/470d3291-33be-34b8-9ed3-d7a03cf6996c.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 6363 IP address blocks: 2606:9fc0:f206::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:d5:9e:86:30:0e:94:d7:74:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=9c2bf880-62f4-49e1-9e2e-5a68ca8ebcca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:be:c6:57:37:43:4e:a7:da:49:9c:3e:a5:7d: 18:bd:12:a6:46:71:03:cb:9d:69:34:19:aa:28:6e: 73:0d:ce:d4:10:81:26:8e:7a:68:10:c2:ab:4f:dd: ed:eb:f5:84:f5:c8:dd:cb:f3:c2:9b:1c:d3:94:55: d5:ab:dc:02:1f:b2:99:78:bd:2b:82:78:53:17:fc: b5:c6:99:7c:f9:ee:b4:1d:a7:b7:da:f4:1c:61:5b: b6:93:16:3a:7d:07:4a:6c:45:4d:56:c3:23:70:07: c3:c0:18:a5:40:72:5e:d4:ac:e0:64:03:7e:5d:d4: 64:f9:47:da:ef:c2:05:2d:4b:52:9c:93:ca:aa:f7: ab:ad:0c:bf:49:85:d1:bc:38:16:bf:62:fa:fb:19: 7c:b5:14:e6:5d:9c:1a:f9:5c:c7:b5:e9:77:f2:3d: b1:63:13:7d:05:57:1a:41:ac:9c:86:c7:c6:95:6c: 0e:85:59:c5:e6:aa:78:dd:55:15:32:b0:c9:8e:c8: da:0d:12:7a:8a:5b:44:d2:51:8c:77:61:4e:43:98: dc:29:46:8c:19:02:38:82:14:72:bd:c3:07:2d:cb: 89:d6:d9:74:53:0c:1d:21:a5:c0:22:6e:99:2b:60: 00:71:fb:20:ce:60:24:56:d0:27:de:7e:ba:76:05: b5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DA:56:BC:5F:7E:DC:AF:6C:43:3C:98:57:65:51:7B:81:95:B3:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/470d3291-33be-34b8-9ed3-d7a03cf6996c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv6: 2606:9fc0:f206::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:0e:3e:17:92:3b:e5:85:3a:8c:2d:f6:f6:65:93:0f:76:bf: 8c:70:ba:0c:04:6d:01:89:0d:c5:aa:51:72:7f:a2:74:71:30: 51:1d:9d:c3:b1:3e:65:02:d3:0d:0b:9d:15:53:91:0c:c3:65: e9:5b:90:af:d1:a4:36:39:48:02:86:01:f2:35:e0:f8:01:6f: ef:a2:69:52:76:fa:ba:06:62:66:f0:f8:9b:46:c3:ca:b7:41: 1f:c4:65:18:d7:e3:65:33:c7:1b:ff:aa:b8:f2:40:57:1f:29: 71:c2:eb:96:85:9e:d7:06:f0:d7:f6:6f:bd:76:7d:8c:50:e3: 29:5c:bc:e2:9d:3c:b0:70:25:c8:d1:82:19:e3:1b:b2:dc:6c: 11:42:5e:11:fb:d3:18:71:dd:dd:44:93:40:46:57:c4:9e:ef: b7:d7:1e:9a:49:93:da:56:6e:77:da:61:56:1f:e5:cd:3e:5b: d6:52:6d:1d:e6:25:52:f7:4c:1f:c9:86:93:21:54:95:d9:d4: 55:c5:58:a2:e1:99:cb:37:19:f5:fa:61:bd:d1:18:a5:1e:f8: 7c:57:e7:c0:28:8b:71:35:a7:09:6e:ea:bf:95:b3:35:09:22: 3b:4b:60:50:61:8c:5c:7f:4f:49:f1:e9:bb:16:6d:b9:3c:e5: a5:8a:8e:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErey9WehjAOlNd0/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk OWMyYmY4ODAtNjJmNC00OWUxLTllMmUtNWE2OGNhOGViY2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn77GVzdDTqfaSZw+pX0YvRKmRnEDy51pNBmq KG5zDc7UEIEmjnpoEMKrT93t6/WE9cjdy/PCmxzTlFXVq9wCH7KZeL0rgnhTF/y1 xpl8+e60Hae32vQcYVu2kxY6fQdKbEVNVsMjcAfDwBilQHJe1KzgZAN+XdRk+Ufa 78IFLUtSnJPKqverrQy/SYXRvDgWv2L6+xl8tRTmXZwa+VzHtel38j2xYxN9BVca QaychsfGlWwOhVnF5qp43VUVMrDJjsjaDRJ6iltE0lGMd2FOQ5jcKUaMGQI4ghRy vcMHLcuJ1tl0UwwdIaXAIm6ZK2AAcfsgzmAkVtAn3n66dgW1HwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOjaVrxfftyvbEM8mFdlUXuBlbOMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvNDcwZDMyOTEtMzNiZS0z NGI4LTllZDMtZDdhMDNjZjY5OTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgafwPIG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABwOPheSO+WFOowt9vZlkw92v4xwugwEbQGJDcWqUXJ/onRxMFEd ncOxPmUC0w0LnRVTkQzDZelbkK/RpDY5SAKGAfI14PgBb++iaVJ2+roGYmbw+JtG w8q3QR/EZRjX42Uzxxv/qrjyQFcfKXHC65aFntcG8Nf2b712fYxQ4ylcvOKdPLBw JcjRghnjG7LcbBFCXhH70xhx3d1Ek0BGV8Se77fXHppJk9pWbnfaYVYf5c0+W9ZS bR3mJVL3TB/JhpMhVJXZ1FXFWKLhmcs3GfX6Yb3RGKUe+HxX58Aoi3E1pwlu6r+V szUJIjtLYFBhjFx/T0nx6bsWbbk85aWKjok= -----END CERTIFICATE-----Generated at Sat Aug 23 18:07:32 2025 by rpki-client